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Abstract — There are several methods for constructing secret 
sharing schemes, one of which is based on coding theory. 
Theoretically, every hnear code can be used to construct secret 
sharing schemes. However, in general, determining the access 
structures of the schemes based on linear codes is very hard. This 
paper proposed the concept of minimal linear code, which makes 
the determination of the access structures of the schemes based 
on the duals of minimal linear codes easier. It is proved that the 
shortening codes of minimal linear codes are also minimal ones. 
Then the conditions whether several types of irreducible cyclic 
codes are minimal linear codes are presented. Furthermore, the 
access structures of secret sharing schemes based on the duals 
of minimal linear codes are studied, and these access structures 
in specific examples are obtained through programming. 

Index Terms — Secret sharing. Minimal linear codes. Access 
structures. Minimal codewords. Irreducible cyclic codes. 

I. Introduction 

For the original motivation of safeguarding cryptographic 
keys from loss, the first construction of secret sharing schemes 
(SSSs) was done by Shamir[l] and Blakley[2] in 1979, respec- 
tively. Due to their important role in various applications such 
as e-voting schemes, access control systems and digital cash 
protocols, the SSS have been studied by several authors[3-6]. 
Informally, an SSS is a protocol which includes a pair of effi- 
cient algorithms: a distribution algorithm and a reconstruction 
algorithm, implemented by a dealer and some participants. 
The distribution algorithm allows a dealer to split a secret 
s into different pieces, called shares, and distribute them to 
participants. The reconstruction algorithm is executed by the 
authorized subsets of parties who are able to reconstruct the 
secret by using their respective shares. The collection of these 
authorized sets of participants is called the access structure. A 
group of participants is called a minimal authorized subsets if 
they can recover the secret with their shares, and any of its 
proper subgroups cannot do so. 

An SSS is called perfect if any non-authorized subset of 
participants have no information about the secret, and ideal if 
the shares are of the same size as that of the secret. 

In 1993, Massey utilized linear codes for a perfect and 
ideal SSS, and pointed out the relationship between the access 
structures and the minimal codewords of the dual code of the 
underlying code[7,8]. Unfortunately, determining the minimal 
codewords is extremely hard for general linear codes, which 
means that to obtain the access structures of the SSS based on 
general linear codes is also hard[9,10]. This paper put forward 
the concept of minimal linear code, whose minimal codewords 
is easier to be obtained than the other codes's. Thus, looking 



for and constructing minimal linear codes become the key to 
this problem. 

In this paper, we give out the construction of minimal linear 
codes and study the conditions to determine minimal linear 
codes. Then we discuss the minimal authorized subsets of 
secret sharing schemes based on the duals of a type of minimal 
linear codes. Finally, the algorithm applied to compute the 
minimal codewords is presented and the access structures 
of the schemes in specific examples are found out through 
programming. 

II. Minimal linear codes and their construction 

Throughout this paper, let q = , where p is a prime 
and s a positive integer. A linear [n^k,d\q\ code C is a 
fc-dimensional subspace with minimum (Hamming) distance 
d. Let G — (go, gii ■ • ■ 1 gn-i) be a generator matrix of an 
[a, k, d; q] code, i.e., the row vectors of G generate the linear 
subspace C. We always assume that no column vector of any 
generator matrix is the zero vector 

Definition 2.1:(\9\) The support of a vector c S -F" 
is defined to be {0 < i < n — 1 : q 7^ 0}. A codeword 
C2 covers a codeword ci if the support of C2 contains that of ci . 

Definition 2.2.-(|9]) A codeword c is called a minimal 
codeword if its first coordinator is 1 and covers no other 
codeword whose first coordinator is 1 . 

Definition 2.5.([10'|) If a nonzero codeword c covers only 
its multiples, but no other nonzero codewords, then it is called 
a minimal vector. 

From the discussions above, it is clear that a minimal 
codeword must be a minimal vector, but a minimal vector 
may not be a minimal codeword. 

Definition 2.4: A linear code G is called minimal if every 
column vector of any generator matrix is nonzero, and each 
of the nonzero codewords in linear code G is minimal vector. 

Next we will show how to construct a new minimal linear 
codes through shortening the codewords of minimal linear 
codes. 

Let C be an [n, k; q] linear code with its generator matrix 

/ ffll 512 ••• 9l.n-l gi.n \ 
Q _ 921 922 ■ ■ ■ 92,n-l 92,n 

\ 9kl 9k2 ■ ■ ■ 9k,n-l 9k,n / 



Lemma 2.5: Let C be an [n, k; q] code, and any columns 
of its generator matrix G are not multiples of each other. Let 

C(n) = {c = (ci,C2, • • • ,c„_i,0)|c e C}, then 

(a) C{n) is an [n,k — 1; q] code; 

(b) The fore n — 1 colunms of the generator matrix G{n) 
of C{n) have no zero column. 

Proof: (a) Since any columns of the generator matrix G 
of linear code C are not multiples of each other, so G has no 
zero column. We assume that 51 „ ^ 0, then the first row of 
G are multiplied by — 5]^^(/2,n, • • • , —gi^ngk,n, and are added 
to the second row to the k row, respectively. We get 
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It is clear that G(n) is a generator matrix for an [n, k — l;q] 
linear code, which is contained in C(n), so dim(C(n)) > 
k — 1. On the other hand, (511,512, ••• ^ C, so 

dim(C(ri)) < fc — 1. The conclusion then follows . 

(b) Suppose the ith column of G{n) be zero for 1 < i < 
n — 1, then 

/ 92,i - 9T,i92,n9l,; 
\ 9k,i - 9l,li9k,n9l,- 

if and only if 



/ 9l,^ \ 




( 9l,n \ 


9l,i 




92,n 




= 9i,i9i,i 




\ 9k,i j 




\ 9k,n J 



Hence the ith and nth column of G are multiples of each other. 
Contradiction. 

Lemma 2.6: If C is an [n,k;q] code, let C{n)[n — 1] = 

{c= (ci,C2,---,C„_i)| (ci,C2, 

•••,c„_i,0) € C{n)}, then 
(a) G{n)[n — 1] is a generator matrix of C(n)[n — 1], 



G(n)[n- 1] 
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where G(n) [n — 1] is a matrix formed by the fore n—1 
columns of G(n); 

(b) C{n)[n — 1] is an [n — l,k — l;q] code. 

Proof: According to the proof of Lemma 2.5, G(n)[n — 1] 
is a matrix of C{n)[n — 1]. Hence, C{n)[n — 1] is an [n — 
1, A; — 1; q] code. 

Theorem 2.7: If G is an [n, fc; g] minimal hnear code, then 
C{n)[n — 1] is an [n—l,k— 1; g] minimal linear code. 

Proof: By Lemma 2.6, C{n)[n — 1] is an [n — 1, A; — 1; q\ 
code. 



Suppose G(n)[n — 1] be not a minimal linear code, then 
there exists a nonzero codeword c' = (ci, C2, • • • , c„_i) € 
C{n)[n — 1] which is not minimal, namely, there would exist 
nonzero Cg = (cqi, C02, • • • , co,n-i) e C{n)[n — 1] such that 
c' can cover Cq. Since c = (ci, C2, • • • , c„_i, 0) € G and 
Co = (coi, C02, • • • , co,n-i, 0) G G, furthermore, c can cover 
Co in linear code G, which means c is not a minimal vector 
and hnear code G is not minimal. This is contrary to the 
assumption that G is a minimal linear code. 

We need to introduce the following mark: 
G(n,n - 1, • • • ,n - i) = {c = (ci,C2, ■ • ■ ,c„_i_i,0, • • • ,0)| 
c G G} (0 < i < n - A; - 2). Then, 

G(n, • • • ,n-i)[n~i~l] = {c = (ci,C2, • ■ • ,c„_i_i)| 
(ci,C2, • • • ,c„_i_i,0, • ■ • ,0) e G}. 

It is easier to show that C(n. n — 1, ■ • ■ , n — ?) and G(n, n — 
1, ■ ■ ■ ,n — i)[n — i — 1] are [«.. A; — ?' — 1: g] and [n ~ i — l,k — 
i — l;q] linear codes, respectively. Then we have 

G(n, n-1, • • • , A;+2) < • • • < G(n, n-1, • • • , n-i) < C{n) < C, 

where G(n) < G denotes that G(n) is a subcode of G. 

Theorem 2.8: If G is an [n. A:; g] minimal linear code, and 
minimum (Hamming) distance of the dual code G""- > 2 then 

(a) The generator matrix of G(n, n — 1, n — i)[n — i— 1] 
has no zero column; 

(b) G(n, n—1, • ■ • , n—i)[n—i—l] is an [n—i—1, k—i—1; q\ 
minimal linear code. 

Proof: (a) We first consider the relationship between 
G(n, n — 1, • • • , n — i)[n — i — 1]-^ and G(n, n — 1, • • • , n — 
i)[n-i-2]-'-. Let {xi,X2,-- ■ ,Xn-i-2) G G(n, n-1, • ■ • , n- 
i - l)[n - i - 2]^, then 

XiCi + X2C2 H h X„_i_2C„_i_2 = 0. 

For any (ci, C2, ■ • ■ ,c„_j_2) G C{n,n - 1, - ■ ■ ,n-i- l)[n- 
i - 2], then 

XiCi + a;2C2 H h Xn-i-2Cn-i-2 + OCn-i-1 = 0. 

For any (ci,C2, • • • , c„_i_2, c„_j_i) G G(n,n - 1,- • ■,n - 
?)[n — ?■ — 1], we have 

{xi,X2,-- ■ ,Xn-i-2,0) G G(n, n-1, • • • , n-i)[n-z - l]-"- 
(0 < i < n- A;-2). 

From the above discussions, it is clear that the minimum 
(Hamming) distance of G(n, n — 1, n — i)[n — z — 1]-*- > 2 
as the minimum (Hamming) distance of G""- > 2. Hence two 
columns of generator matrix of G(n, n — 1, ■ ■ ■ ,n — i)[n — i — l] 
are linearly independent, namely, without nonzero column. 

(b) If G is an [n. A;; q] minimal hnear code, then 
G(n, n — 1, • • • , n — ?)[n — « — 1] is an [n — i — I, k — i — 1; q] 
linear code whose codewords are all minimal vectors, so 
G(n, n — 1, • ■ • ,n — i)[n — i — is an [n — i — 1, k — i — 1; q] 
minimal linear code for 0<i<n — A; — 2. 

In view of Theorem 2.7 and 2.8, the new class of minimal 
liner codes can be constructed by shortening all codewords of 
the old minimal hnear codes. 



III. Characterisations of minimal linear codes 

First, by means of the concept of minimal linear code, we 
state the Proposition 3 in [9] by the following theorem. 

Theorem 3.1: In an [n, k; q] code C, let Wmin and Wmax 
be minimum and maximum nonzero weights, respectively. If 
> and every column vector of generator matrix 
of C is nonzero, then C is a minimal linear code. 

It is obvious from the concept of the minimal linear code 
that a 1 -weight linear code is must be minimal. 

Next we will present a method for determining whether a 
type of irreducible cyclic codes are minimal. 

Recall that q — p" ^ where p is a prime and s a positive 
integer. Let r — and m a positive integer. 

Definition 5.2.-(||TT|) Let iV > 1 be an integer dividing r — 1, 
and put n = . Let a be a primitive element of Fqm and 
e = . The set 
C(q,m,N) = 

{(Tr,/,(/3),Tr,/,(/30),-.-,Tr,/,(/3r-i))| /3 e Fr} (1) 

is called an irreducible cyclic code over Fg, where Tr is the 
trace function from Fr onto Fq. 

Since the weight distribution of some irreducible cyclic code 
have been investigated [11]. We will study the conditions 
whether a given irreducible cyclic code C{q, m, N) is a 
minimal linear code for different N by means of its weight 
distribution . 

Theorem 3.3: Let iV = 2. 

(a) If m is even and 2q — q~ — 1 < 0, then C{q, m, 2) is 
a minimal linear code . 

(b) If m is odd, then C{q, m, 2) is a minimal linear code . 
Proof: (a) By [11] the weight distribution in this case is 

1 H — X 2, _| _ X 2, ^ 

By Theorem 3.1 

Wmin _ g"' - ^ g - 1 

Wmax q^ + q^ q 

and so ^ 

g^"^^ - g ^ ^ 

qi^+i _ g _ + 2g — 1 

Hence 

2g-g^ - 1< 0. 

(b) If iV = 2 and m is odd, then C{q,m,2) is a 1-weight 
code. Consequently, C(g,m, 2) is a minimal linear code. 

Theorem 3.4: Let = 3. For case q = 2{mod 3), 

(a) If m = 0{mod 4) and 3g — g^ — 2 < 0, then C(g, m, 3) 
is a minimal linear code. 

(b) If m = 2{mod 4) and 3g - g^ - 1 < 0, then C(g, m, 3) 
is a minimal linear code. 



For case q = l{mod 3), and m ^ 0{mod3), then C(g, m, 3) 

is a minimal linear code. 
Theorem 3.5: Let N = A, q = 3{mod 4). 

(a) If m = 0{mod 4) and 4(7 - - 3 < 0, then C(g, m, 4) 
is a minimal linear code. 

(b) If m = 2 (mod 4) and Aq-q^ -1 < 0, then C(g,rn,4) 
is a minimal linear code. 

Theorem 3.6: Let iV = 4, (7 = l(moo? 4), p = 3(mo(i4), 
and let s be even. 

(a) If m = O(mod 4) and 4g - - 3 < 0, then C(g, to, 4) 
is a minimal linear code. 

(b) If TO = 2{mod 4) and 2q-q^ - I <Q, then C{q,m,'i) 
is a minimal linear code. 

The proof of Theorem 3.4, 3.5, 3.6 is similar to that of 
Theorem 3.3. 

If an irreducible cycUc code is minimal, we can construct 
new minimal linear codes by means of the following theorem. 

Let I be the smallest non-zero integer such that 9^ £ Fq and 
let 6*' = e . it is easy to show that I \ n m accordance with 
Definition 3.2 and [12], then C{q,m, N) can be expressed as 

C(g,TO,iV) = 

{c^ = (|c>|ec-^| • • • le^c-^l • • • |e*-%)|/? £ F,} (2) 

where n = It, c> = {Tr,/,(/3), • • • ,Tr,/,(/30'-i)|/3 e FJ. 
Theorem 3.7: Let 

C = {cp - (Tr,/,(/3),Tr,/,(/30), • • • ,Tr,/,(/30'-i)|/3 e FJ(3) 

then C(g, TO, N) is a minimal linear code if and only if C is 
a minimal linear code. 

Proof: Since the element in (2) is a non-zero element of 
Fq, this follows that wt{e^Cp) = wt{cp), and then ^^(c/j) = 
twticg), SO ^c™''^^ = c(q,m,N)mm conclusion then 

follows from Theorem 3.1. 

IV. Secret sharing schemes from minimal linear 
codes 

In this section, we first review one approach based on 
coding theory to construct the secret sharing schemes, and 
then determine the access structures of the SSS based on the 
duals of minimal linear codes. 

A. Secret sharing schemes from linear codes 

In the SSS constructed from an [n,k;q] code C with 
generator matrix G = (go, gi, • ' • , g„_i)fex« , the secret is 
an element of Fg, and n-1 parties Pi, P2, ■ ■ ■ , Pn-i, and 
a dealer are involved. To compute the shares with respect 
to a secret s, the dealer randomly chooses a vector u = 
{uq, . . . , G Fq such that s = ugg. There are altogether 

q''"^ such vectors u G Fq. The dealer then treats u as an 
information vector and computes the corresponding codeword 
t = {to,ti, . . . ,tn-i) ~ uG. He then gives ti to party Pi as 
shares for each i > 1. 



Note that to = ugp = s. It is easily seen that a set of shares 
tii,ti2, ■ ■ ■ ,tim determines the secret if and only if is a 
linear combination of g^^ , • • • , g^^. 

So we recall the following lemma[7]. 

Theorem 4.1: Let G be a generator matrix of an [n,k;q] code 
C. In the secret sharing scheme based on C, a set of shares 
tii,ti2, ■ ■ ■ , Um determines the secret if and only if there exists 
a codeword 

(l,0,...,0,ca,0,...,0,Ci„,0,...,0) (4) 

in the dual code C^, where 7^ for at least one j, 
1 < ii < ■ ■ ■ < iim < n — 1 and 1 < to < n — 1. 

If there is a codeword of (4) in C-^, then the vector gg is 

m 

a linear combination of g^g, • ■ • , g^^, namely, go = ^Xjgij, 
where xj e Fg for 1 < j <m. Then the secret s is recovered 

m 

by computing s = ''^^XjUj. From Theorem 4.1, the minimal 

codeword and the minimal linear code we have discussed in 
section 1, it is clear that there is a one-to-one correspondence 
between the set of minimal authorized subsets and the set of 
minimal codewords of the dual code C"*-. Thus, in order to 
determine the access structures of the secret sharing schemes 
based on C, we only need to determine the set of minimal 
codewords of the dual code C"*-. 

B. The access structure of the secret sharing schemes based 
on minimal 

First, we state the Proposition 2 in [9] as follows. 

Theorem 4.2: Let C be an [n,k;q] minimal hnear code, and 
^ = (§0' 8i' • • • > Sn-i) its generator matrix. Then, in the 
SSS based on C"*", there are altogether g'^"^ minimal access 
sets. In addition, we have the following: 

(a) If gj is a multiple ofgo,l<i<n — 1, then participant 
Pi must be in every minimal access set. Such a participant 

is called a dictatorial participant. 

(b) If gj is not a multiple of gg, 1 < i < n — 1, then parti- 
cipant Pi must be in (g — out of g'^~^minimal 
access sets. 

Whether a given irreducible cyclic code C{q,in, N) is a 
minimal hnear code for different N has been discussed in 
section 3. We have the following theorem in terms of Theorem 
4.2 . 

Theorem 4.3: Let C be the [n, k; 2] irreducible cyclic code. 
If C is a minimal linear code, then in the SSS based on C"*-, 
there are altogether 2^^^ minimal authorized subsets and n—1 
participants serve in 2^°"^ out of 2*^"^ minimal authorized 
subsets. Namely, there exists no dictators. 

Proof: We only need to prove that the dual code has 
minimum distance at least three. On the contrary, suppose 
that C"*- have a codeword of Hamming weight 2. Then 
there would exist two distinct integers < i < n — 1 and 
< j < n - 1 such that TrL/xiPO') = TrL/KiPO^) for 



all /3 e Fr. This implies that 0^ = 0' and then i = j. This 
is contrary to the assumption that i and j are distinct. The 
conclusion then follows from Theorem 4.2. 

Now we describe the algorithm applied to obtain all minimal 
authorized subsets of an irreducible cyclic code which satisfies 
the condition of the minimal linear code. 
Algorithm 

INPUT: a prime p ; Let s = 1, positive integers m ; a r — 1 
factor N; and a primitive polynomial in Fg [x] of degree m. 

OUTPUT: t = {ti,t2,...,ti) (2 < Z < n - 2) , which are 
minimal authorized subsets of secret sharing schemes based 
on the duals of C {q, to, N) whose Parameters satisfy the 
condition of the minimal linear code. 

1. (Computing Tr,/,(/3),Tr,/,(/3^^),•••,Tr,/g(/3r-l)) Do 
the following: 

1.1. For i ~ 1 to r — 1 do the following: 

If Trr/q(/3) = 1 (modp), where ^ = a*, then compute 
TT^/g{^0), ■ ■ ■ ,Trr/q{(30"-~'^). otherwise, choose other P e Fr 
and compute Tij./g{P)- 

1.2. For j = 1 to n — 1 do the following: 

If TTr/g{p0^) i- (modp), set ^ j {\ < k < j). 
Otherwise, compute Tir/g{(30-'^^) rather than putting as a 
coordinate of t. 

2. Retum(t). 

Example 4.4: Let N = 3, hy Theorem 3.4, C(2,6,3), 
which satisfies 3g — — 1 < 0, is a [21, 6; 2] minimal hnear 
code. In the SSS based on C-'-(2, 6, 3), all the 32 authorized 
subsets are minimal ones obtained in terms of the algorithm, 
which are given as follows : 

{1,3,4,5,6,1 1,13,14,15,17,19},{1,2,3,4,6,7,1 1,15,16,17,20}, 
{2,3,4,5,10,12,13,14,16,18,20},{1,4,5,6,7,8,9,1 1,12,16,20}, 
{3,4,5,6,7,8,10,11, 15,19,20},{1,2,3,8,10,11, 12,14,16,18,19}, 
{1,2,7,9,10,11, 13,15,17,18,20},{1,6,8,9,10,12,14,16,17,19,20}, 
{5,7,8,9,1 1,13,15,16,18,19,20},{1,2,5,6,7,8,9,10,12,13,17}, 
{1,2,3,5,6,10,14,15,16,19,20},{3,6,8,14,15,17,20}, 
{1,3,4,8,12,13,14,17,18,19,20},{2,5,6,9,12,14,20}, 
{1,5,9,10,1 1,14,15,16,17,18,19},{2,3,5,6,7,8,13,15,16,17,19}, 
{2,3,7,11, 12,13,16,17,18,19,20},{6,7,9,12,13,16,19}, 
{2,4,6,7,9,10,11, 12,17,19,20},{2,4,5,7,8,9,10,15,17,18,19}, 
{4,5,6,9,10,1 1,12,13,14,16,17},{4,8,9,10,13,14,15,16,17,18,20}, 
{1, 3, 6, 7, 10, 13, 15}, {1, 2, 4, 6, 8, 9, 11, 12, 13, 14, 19}, 
{3, 4, 7, 10, 12, 18, 19}, {1, 2, 3, 4, 5, 7, 8, 12, 16, 17, 18}, 
{1, 4, 7, 9, 15, 16, 18}, {1. 2, 4, 5, 9, 13, 14, 15, 18, 19, 20}, 
{2, 8, 9, 11, 14, 15, 18}, {2, 3, 4, 6, 8, 10, 11, 13, 14, 15, 16}, 
{3, 5, 11, 12, 14, 17, 18}, {1, 3, 5, 7, 8, 10, 11, 12, 13, 18, 20}, 

where {1,3,6,7,10,13,15} denotes the authorized subset 
{Pi, P3, Pq,P7, PiQ, P13, P15}. Each of 20 participants serves 
in 16 out of 32 minimal authorized subsets without dictators. 

The shortening code of the minimal linear code C(21) in 
Example 4.4 is C(21, • ■ • . 21 - i)[21 - ?; - 1](0 < i < 3), 
which is a minimal linear code as well in accordance with 



Theorem 2.7 and Theorem 2.8. We might take i = as an 
example, and then obtain all minimal codewords in C(21)[20] 
through programming , as follows: 

{1,1,0,1,1,1,1,0,0,0,0,1,0,1,1,1,0,1,0,1}, 

{1,1,1,0,0,1,1,1,1,1,1,0,1,1,0,0,0,1,0, 0}, 

{1, 1, 0, 1, 0, 0,1,1. 0, 0. 1, 0, 0, 1, 0, 1, 0, 0, 0, 0}, 

{1,1,1,1,0,0,0,0,1,0,1,1,1,0,1,0,1,0,1,1}, 

{1,0,0,1,1,0,0,1,0,0,1,0,1,0,0,0,0,0,1,1}, 

{1,1,1,1,1,1,0,1,1,0,0,0,1,0,0,0,1,1,1,0} 

{1,1,0,0,1,0,0,1,0,1,0,0,0,0,0,1,1,0,1,0}, 

{1, 0, 0, 1, 0, 1, 0, 0, 0, 0, 0, 1, 1, 0, 1, 0, 0, 1, 1, 0}, 

{1,0,1,1,1,0,1,0,1,0,1,1,0,1,1,1,1,0,0,0}, 

{1,1,0,0,0,1,0,0,0,1,1,1,0,0,1,1,1,1,1,1}, 

{1,1,1,0,1,0,1,0,1,1,0,1,1,1,1,0,0,0,0,1}, 

{1,0,1,0,0,0,0,0,1,1,0,1,0,0,1,1,0,0,1,0}, 

{1,0,0,0,0,0,1,1,0,1,0,0,1,1,0,0,1,0,0,1}, 

{1,0,1,0,1,1,0,1,1,1,1,0,0,0,0,1,0,1,1,1}, 

{1,0,0,0,1,1,1,0,0,1,1,1,1,1,1,0,1,1,0,0}, 

{1,0,1,1,0,1,1,1,1,0,0,0,0,1,0,1,1,1,0,1}, 

in the secret sharing schemes based on C(21)[20]^, 
there are 16 minimal authorized subsets without dictators. 

Theorem 4.5: Let C be the C(3,to, 2) irreducible cyclic 
code with length n and dimension k as well as the minimal 
linear code. In the SSS based on C"*-, there are altogether 
■jfe-i minimal authorized subsets. If 2 ^ Qijnodn), then n — 1 
participants serve in 2 • S*'"^ minimal authorized subsets; If 
2 = O(morfn), then n — 2 participants serve in 2-3'^"^ minimal 
authorized subsets and there exists one dictator Pil . 

2 

Proof: For l<«<n— 1, g^isa multiple of gg if and 
only if 9'^ G Fs, and 6 = a'^, where a is a primitive element 
of Fs^, namely, ord(a2*)|2. Since ord(a2i) = ^^3"-!,^^ , If 
3™-! = (3™-!, 2i), contradiction; If 3'"-l =2(3^-1,2^), 
then i = ^, so there exists one dictator Pn. 

Example 4.6: Let N = 2, , C(3,4,2), which satisfies 
2q — — 1 < 0, is a [40, 4; 3] minimal linear code by 
Theorem 3.3. In the SSS based on (7-^(3,4,2). all the 27 
authorized subsets are minimal ones obtained in terms of the 
algorithm, which are given as follows : 

{1, 2, 3, 4, 5, 6, 7, 8, 9, 12, 14, 15, 16, 18, 20, 21, 22, 23, 24, 

25, 26, 27, 28, 29, 32, 34, 35, 36, 38}, 

{2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 14, 16, 17, 18, 20, 22, 23, 24, 

25, 26, 27, 28, 29, 30, 31, 34, 36, 37, 38}, 

{2, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 16, 18, 19, 20, 22, 24, 25, 

26, 27, 28, 29, 30, 31, 32, 33, 36, 38, 39}, 

{1, 4, 5, 6, 7, 9, 10, 12, 16, 17, 19, 20, 21, 24, 25, 26, 27, 

29,30,32,36,37, 39}, 

{1, 2, 4, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 18, 20, 21, 22, 24, 

26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 38}, 

{1, 2, 5, 6, 7, 8, 10, 11, 13, 17, 18, 20, 21, 22, 25, 26, 27, 

28,30,31,33,37,38}, 

{1, 3, 4, 5, 8, 9, 10, 11, 13, 14, 16, 20, 21, 23, 24, 25, 28, 



29,30,31,33,34,36}, 

{3, 5, 6, 7, 9, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 23, 25, 

26, 27, 29, 31, 32, 33, 34, 35, 36, 37, 38, 39}, 

{1,4, 6, 7, 8, 10, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 24, 

26, 27, 28, 30, 32, 33, 34, 35, 36, 37, 38, 39}, 

{1, 2, 3, 6, 8, 9, 10, 12, 14, 15, 16, 17, 18, 19, 20, 21, 22, 

23, 26, 28, 29, 30, 32, 34, 35, 36, 37, 38, 39}, 

{2, 6, 7, 9, 10, 11, 14, 15, 16, 17, 19, 20, 22, 26, 27, 29, 
30,31,34,35,36,37,39}, 

{1,3, 7, 8, 10, 11, 12, 15, 16, 17, 18, 20, 21, 23, 27, 28, 

30,31,32,35,36,37,38}, 

{1, 2, 3, 4, 5, 6, 9, 11, 12, 13, 15, 17, 18, 19, 20, 21, 22, 

23, 24, 25, 26, 29, 31, 32, 33, 35, 37, 38, 39}, 

{1, 2, 3, 4, 5, 6, 7, 10, 12, 13, 14, 16, 18, 19, 20, 21, 22, 

23, 24, 25, 26, 27, 30, 32, 33, 34, 36, 38, 39}, 

{2, 3, 5, 9, 10, 12, 13, 14, 17, 18, 19, 20, 22, 23, 25, 29, 

30,32,33,34,37,38,39}, 

{1, 2, 3, 4, 5, 6, 7, 8, 11, 13, 14, 15, 17, 19, 20, 21, 22, 23, 

24, 25, 26, 27, 28, 31, 33, 34, 35, 37, 39}, 

{1,3, 4, 6, 10, 11, 13, 14, 15, 18, 19, 20, 21, 23, 24, 26, 
30,31,33,34,35,38,39}, 

{1, 2, 4, 5, 7, 11, 12, 14, 15, 16, 19, 20, 21, 22, 24, 25, 27, 

31,32,34,35,36,39}, 

{1, 2, 3, 5, 6, 8, 12, 13, 15, 16, 17, 20, 21, 22, 23, 25, 26, 
28,32,33,35,36,37}, 

{3, 4, 5, 6, 8, 9, 11, 15, 16, 18, 19, 20, 23, 24, 25, 26, 28, 
29,31,35,36,38,39}, 

{1,3, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 17, 19, 20, 21, 23, 

25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 37, 39}, 

{2, 3, 4, 6, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 20, 22, 23, 

24, 26, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37}, 

{2, 3, 4, 7, 8, 9, 10, 12, 13, 15, 19, 20, 22, 23, 24, 27, 28, 

29,30,32,33,35,39}, 

{1, 2, 5, 7, 8, 9, 11, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 

25, 27, 28, 29, 31, 33, 34, 35, 36, 37, 38, 39}, 

{4, 5, 7, 8, 9, 12, 13, 14, 15, 17, 18, 20, 24, 25, 27, 28, 29, 

32,33,34,35,37,38}, 

{1, 2, 3, 4, 7, 9, 10, 11, 13, 15, 16, 17, 18, 19, 20, 21, 22, 
23, 24, 27, 29, 30, 31, 33, 35, 36, 37, 38, 39}, 
{1, 2, 3, 4, 5, 8, 10, 11, 12, 14, 16, 17, 18, 19, 20, 21, 22, 23, 
24, 25, 28, 30, 31, 32, 34, 36, 37, 38, 39}, 

each of 38 participants serves in 18 out of 27 minimal 
authorized subsets with one dictator P20. 

According to Theorem 3.7, we can construct the minimal 
Unear code C by means of the minimal hnear code 
C(3,4,2). Let ? = 20 in (3), then 0^^ e F3 and C = 
{Cfj = (Tr34/3(/?),Tr34/3(/30),---,Tr34/3(/30i«)|/3 G F34} 
is a [20, 4; 3] minimal hnear code, all of whose minimal 
codewords can be obtained through programming, as follows: 

{1,1,2,1,2,2,0,0,1,0,2,1,2,0,2,0,2,1,1,1}, 
{1, 2, 1, 2, 2, 0, 0, 1, 0, 2, 1, 2, 0, 2, 0, 2, 1, 1, 1, 2}, 

{1,0,0,0,2,1,0,2,2,1,0,0,1,1,1,1,0,1,1,0}, 
{1, 2, 2, 0, 0, 1, 0, 2, 1, 2, 0, 2, 0, 2, 1, 1, 1, 2, 2, 1}, 
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in the secret sharing schemes based on C, there are 27 
minimal authorized subsets without dictators. 

From Example 4.4 and Example 4.6, we have that the 
number of minimal authorized subsets of the SSS based on 
the duals of minimal Unear codes is more vivid than that of 
(t, n) threshold. For instance, the number of the participants 
involved in minimal authorized subsets in Example 4.4 is 1 1 
or 7 in different case. 

V. Conclusions 

We proposed the concept of minimal linear code and studied 
the conditions whether a type of irreducible cyclic codes are 
minimal. In addition, we determined the access structure of 
the secret sharing scheme based on their duals. It is shown 
that the secret sharing schemes based on minimal linear 
codes are not only perfect and ideal but also possess more 
vivid access structures depending on diversity of the weight 
distribution, which may be desirable in certain application 
because participants in such schemes become more democratic 
and powerful. Besides, since the number of participants of the 
minimal authorized subsets of schemes based on the minimal 
linear codes is relevant to the weight of minimal codewords, 
we shall work on the study of minimal hnear codes with three 
weights or more than three weights in a future work. 
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